opensecrets.org

Observed 2026-07-13T00:15:32.057845295+00:00 (19h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now

Runs onCloudflare

Email byGoogle Workspace

Secured byGoogle Trust Services

Registered withAmazon Registrar, Inc.

Also usesFacebook/MetaAtlassianGoogle Search Console

DNSSEC on · IPv6 · non_profit

Every line above is a signed observation. Check the math at the bottom of the page.

INFRASTRUCTURE MAPwhat opensecrets.org actually stands on - every host below is a signed observation

opensecrets.org

A / AAAA

104.18.116.30104.18.117.302606:4700::6812:751e2606:4700::6812:741e

Cloudflareserves the site

bruce.ns.cloudflare.comelma.ns.cloudflare.com

cloudflare.comanswers its DNS

aspmx.l.google.comalt3.aspmx.l.google.comalt4.aspmx.l.google.comalt1.aspmx.l.google.com+1 more

Google Workspacereceives its email

TLS

opensecrets.org

Google Trust Servicesissued its certificate

DNS Records

A 2

104.18.116.30
104.18.117.30

AAAA 2

2606:4700::6812:751e
2606:4700::6812:741e

MX 5

1aspmx.l.google.com
10alt3.aspmx.l.google.com
10alt4.aspmx.l.google.com
5alt1.aspmx.l.google.com
5alt2.aspmx.l.google.com

TXT 7

MS=ms74907869
atlassian-domain-verification=jUXPIP8jmiePY0N7NTB9BH5ELzJaDGCkB7Rb7BUekR/LdRg9tuYKmZZybxwdpx17 facebook-domain-verification=sobgp0qg3v55mpkn4r6p1l397k4gwe
atlassian-sending-domain-verification=a95550bc-d702-4dfc-a475-058b03c7382d
cursor-domain-verification-5vy0a2=ztipyhhcnhWT8Lw0iesr5zDcP
google-site-verification=0bUUMDHr9aBhWRWhXEZ9HgYVW2iIbxBQ_WTrIE9wVBU
v=spf1 include:spf.mtasv.net include:_spf.createsend.com include:mailgun.org include:amazonses.com include:_spfprod.ngpvan.com include:_spf.google.com ~all
v=DMARC1; p=quarantine; sp=none; rua=mailto:re+253769b0fba5@inbound.dmarcdigests.com; pct=100

NS 2

bruce.ns.cloudflare.com
elma.ns.cloudflare.com

SOA 1

bruce.ns.cloudflare.com dns.cloudflare.com

CAA 12

issue "amazon.com"
issue "comodoca.com"
issue "digicert.com; cansignhttpexchanges=yes"
issue "letsencrypt.org"
issue "pki.goog; cansignhttpexchanges=yes"
issue "ssl.com"
issuewild "amazon.com"
issuewild "comodoca.com"
issuewild "digicert.com; cansignhttpexchanges=yes"
issuewild "letsencrypt.org"

TLS Certificates (3)

Common Name	Issuer	Expires
`opensecrets.org`	C=US, O=Google Trust Services, CN=WE1	Wed, 30 Sep 2026 19:53:42 +0000
`WE1`	C=US, O=Google Trust Services LLC, CN=GTS Root R4	Tue, 20 Feb 2029 14:00:00 +0000
`GTS Root R4`	C=BE, O=GlobalSign nv-sa, 2.5.4.11=Root CA, CN=GlobalSign Root CA	Fri, 28 Jan 2028 00:00:42 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for opensecrets.org. It updates itself. It attests a signed observation - not that the site is safe.

<a href="https://domaindrift.io/t/opensecrets.org">
  <img src="https://domaindrift.io/badge/opensecrets.org.svg"
       width="300" height="64" alt="DomainDrift signed observations for opensecrets.org">
</a>

Ed25519 Receipt

Receipt ID: 57a98449-20f9-4e89-91ba-c647616228b1
Output Hash: 688d665d71a1c209bbd2d60a972590f7907c9de147c630223ce925edca5e93d1
Signature: ed25519:d9fbfee74485c3dff6d54db7a6fda6d3afcbbe8e34ec00a90d4b8449f807791a0a254879feb4cb0445fcd79c8196427394bb000251501e1d693f1ef92467cf02
Public Key: ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent: (genesis)
Plane: fast

Verify this in your browser

Permalink: https://domaindrift.io/t/opensecrets.org